The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Viktor Szakats reported that libcurl, an URL transfer library, does not strip off user credentials from the URL when automatically populating the Referer HTTP …
Another victim of the infamous DarkSide ransomware gang has emerged online as Toshiba discloses a…Toshiba Hit By DarkSide Ransomware Attack; While The Latter L…
The largest fuel pipeline system in the United States has suffered a cyber attack potentially…Colonial Pipeline Ransomware Attack Leads To 'Regional Emergency'…
Threat actors are abusing Microsoft Build Engine (MSBuild) to filelessly deliver remote access trojans and password-stealing malware on targeted Windows system…
Security incidents occur. It's not a matter of 'if' but of 'when.' There are security products and procedures that were implemented to optimize the IR process,…
A buffer overflow was discovered in Graphviz, which could potentially result in the execution of arbitrary code when processing a malformed file.
**Redis 6.0.13** Released Mon May 3 19:00:00 IST 2021 Upgrade urgency: SECURITY, Contains fixes to security issues that affect authenticated client connections…
Microsoft is bringing its Threat and Vulnerability Management (TVM) capability to Linux, allowing admins to review recently discovered vulnerabilities within a…
It was discovered that there was a potential memory corruption vulnerability in the lz4 compression algorithm library. For Debian 9 "Stretch", this problem has…
A serious vulnerability recently appeared in another WordPress plugin that could allow extracting sensitive data…SQL Injection Vulnerability Found In CleanTalk…
Twitter has recently launched a new feature that will help users tip each other. Dubbed…Twitter's New 'Tip Jar' Feature Is Exciting ' But Has Some Privacy Issu…
Learn how to install both Linux Malware Detection and ClamAV on your Linux systems for a reliable one-two punch of malware and virus prevention in this tutoria…
A project that aims to put an ultra-tiny Linux board in a standard USB wall charger is in the works. Such a device could be installed at a target location and …
The patch from latest upstream release to address CVE-2021-30152 was not portable to stretch-security version causing MediaWiki APIs to fail. This update inclu…
InfoSec leaders tend to be a specific type. Their jobs require them to think of possible threats, take actions that may not pay immediate results, plan for unk…
postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694) * postgresql: Multiple features escape "security restricted operation" san…
Another victim of ransomware surfaces online. The latest incident hit the cloud hosting service provider…Swiss Cloud Hosting Provider Suffered Ransomware Attac…
It was discovered that there was potential directory-traversal vulnerability in Django, a popular Python-based web development framework.
The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code exe…
Apple on Monday released security updates forÂiOS,ÂmacOS, andÂwatchOSÂto address three zero-day flaws and expand patches for a fourth vulnerability that the co…
Multiple vulnerabilities have been found in Exim, the worst of which allows remote attackers to execute arbitrary code.
Iran has been linked to yet another state-sponsored ransomware operation through a contracting company based in the country, according to new analysis."Iran's …
The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code exe…
Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being activ…